Palo Alto Networks Exam PSE-Platform Topic 1 Question 50 Discussion

Actual exam question for Palo Alto Networks's PSE-Platform exam

Question #: 50
Topic #: 1

Where are three tuning considerations when building a security policy to protect against modern day attacks? (Choose three)

ACreate an anti-spyware profile to block all spyware

BCreate a vulnerability protection profile to block all the vulnerabilities with severity low and higher

CCreate an SSL Decryption policy to decrypt 100% of the traffic

DCreate an antivirus profile to block all content that matches and antivirus signature

ECreate a WildFire profile to schedule file uploads during low network usage windows

Show Suggested Answer

Suggested Answer: B, C, E

by Gail at Nov 26, 2023, 09:30 PM

Limited Time Offer

25%

Off

Get Premium PSE-Platform Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Latrice

8 months ago

Good point. This exam is all about finding the right balance and not going overboard. I'd say the key is being selective and risk-based in your approach. Block the high-priority stuff, leverage automation for detection, but don't sacrifice user experience or privacy in the process. Moderation is key, people!

upvoted 0 times

...

Diego

8 months ago

Haha, yeah C is a big no-no. Though I bet some overeager security admins would still try that. As for the other options, A seems too narrow - you want broader anti-malware protection, not just spyware. And I'm not sure SSL decryption is really a 'tuning' consideration, more of a fundamental policy decision.

upvoted 0 times

Tamesha

8 months ago

E) Create a WildFire profile to schedule file uploads during low network usage windows

upvoted 0 times

...

Stefany

8 months ago

D) Create an antivirus profile to block all content that matches and antivirus signature

upvoted 0 times

...

Effie

8 months ago

B) Create a vulnerability protection profile to block all the vulnerabilities with severity low and higher

upvoted 0 times

...

Mariann

8 months ago

I agree with those choices. The question is really getting at the balance between prevention and detection. We need to cover the basics like antivirus and vulnerability management, but also leverage advanced tools like WildFire to stay ahead of new threats. Oh, and C is a trap - you don't want to decrypt 100% of traffic, that's a privacy nightmare!

upvoted 0 times

...

Tish

8 months ago

Hmm, this question seems to be testing our understanding of security policy tuning. I'd say the key considerations are: B) creating a vulnerability protection profile to block high-severity vulnerabilities, D) using an antivirus profile to catch known threats, and E) setting up a WildFire profile to analyze files during off-peak times.

upvoted 0 times

...